Carnival Cruise Line Data Breach Class Action

What is this lawsuit about?

On May 27, 2026, Carnival Corporation announced that it had been targeted in a cybersecurity incident that may have exposed the personal information of millions of individuals. According to the company, an unauthorized third party gained access to certain systems through a compromised employee account.

Reports indicate that the personal information of nearly 6 million individuals may have been impacted in the data breach. The information potentially affected includes names, contact information, dates of birth, and, for some individuals, government-issued identification details.

Affected individuals may have received notifications regarding the incident and the potential risks associated with the exposure of their personal information.

What is a class action?

A class action is a legal case through which one person makes a claim to the Court on behalf of a similarly situated class of people who have the same or a similar legal claim. A class action seeks to hold a defendant or defendants responsible for their conduct that affects each member of the class by resolving issues that are common to the class in the same legal proceeding, instead of each class member bringing a claim individually.

The individual who first files the claim must ask the Court for permission to proceed as a class action. If permission is granted (referred as “authorized” in Quebec, and “certified” in all other Canadian provinces) and the case may proceed as a class action, the Court will appoint an individual as “Representative Plaintiff” to represent the best interests of the class during the litigation and will define the class group. Each person who meets the criteria of the class group is considered a “Class Member”.